Privacy Policy
Last updated 21 June 2026
This Privacy Policy explains how EstateOps Technologies Limited (“EstateOps”, “we”, “us”) collects, uses, shares and protects personal information when you use our website and the EstateOps platform (the “Service”). We are committed to handling personal data responsibly and in line with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR).
1. Who controls your data
EstateOps is a multi-tenant platform used by residential estates. The relationship depends on the data:
- Estate operational data (work orders, assets, residents’ reports, finance records, visitor logs, etc.) belongs to the estate that uses EstateOps. That estate is the data controller; EstateOps acts as a data processor on its behalf. If you are a resident or service partner, the estate determines how your data is used, and you should also refer to that estate’s own notices.
- Account, billing and website data (your login, subscription, support requests, marketing enquiries) is controlled by EstateOps as the data controller.
2. Information we collect
- Account information: name, email address, phone number, role (manager, resident, service partner, admin) and the estate you belong to.
- Operational content you provide: issues and work orders you raise, photos you upload, checklist entries, notes, asset and maintenance records, and finance entries recorded by estate management.
- Service partner information: company name, trade, ratings and the work assigned to you.
- Payment information: subscription and purchase details. Card payments are processed by our payment provider (Paystack). EstateOps does not see or store your full card details.
- Usage and device data: log data, device and browser type, and limited diagnostic information needed to operate and secure the Service.
- Cookies and local storage: see our Cookie Policy.
3. How we use information
- To provide, maintain and improve the Service and its features.
- To authenticate users and enforce role-based access and estate-level data isolation.
- To process subscriptions and purchases, and to provide support.
- To send service messages and, where relevant, in-app notifications.
- To keep the Service secure, prevent abuse, and meet legal obligations.
- With your consent, to send product updates. You can opt out at any time.
4. Legal bases (NDPA)
We rely on one or more of the following lawful bases: performance of a contract; your consent; our legitimate interests in operating and securing the Service; and compliance with legal obligations. Where we process estate or resident data, we do so on the documented instructions of the estate.
5. How we share information
- Within your estate: data is visible to the appropriate roles in your estate (for example, a manager can see work orders for their estate; a service partner sees only jobs assigned to them).
- Service providers (sub-processors): trusted vendors who host and support the Service, including Supabase (database, authentication and storage), Vercel (application hosting) and Paystack (payments). See our Data Protection page.
- Platform administration: EstateOps support staff may access data on a need-to-know basis to operate the Service, provide support and resolve issues, subject to confidentiality and access controls.
- Legal and safety: where required by law, or to protect rights, safety and the integrity of the Service.
We do not sell your personal data, and we do not serve third-party advertising.
6. International transfers
Some of our providers may store or process data outside Nigeria. Where this happens, we take steps to ensure an adequate level of protection consistent with the NDPA, including contractual safeguards with those providers.
7. Data retention
We keep personal data for as long as needed to provide the Service and for legitimate business or legal purposes. For estate-controlled data, retention is determined by the estate; on termination, we return or delete that data as described in our Data Protection page, subject to legal retention requirements.
8. Your rights
Subject to the NDPA, you may have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; request portability; and withdraw consent. For estate or resident data, please contact your estate management first, as they are the controller. For account and website data, contact us at privacy@estateops.ng. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.
9. Security
We use technical and organisational measures to protect personal data, including encryption in transit, row-level security to isolate each estate’s data, role-based access and audit logging. See our Security page. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.
10. Children
The Service is intended for use by estate management, residents and service partners, and is not directed to children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes may be notified within the Service.
12. Contact us
EstateOps Technologies Limited (RC [RC Number])
[Registered office address], Lagos, Nigeria
Email: privacy@estateops.ng
This document is provided for general information and should be reviewed by qualified legal counsel before you rely on it.